CVE-2026-44273
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A vulnerability in Dell Wyse Management Suite (WMS) prior to version 2605 involves the use of default credentials. It allows an attacker with high privileges and local access to disclose sensitive information.
Risk Assessment
The risk involves potential leakage of sensitive organizational data by an attacker who has already gained local access with high privileges.
Recommendation
Immediately update Dell Wyse Management Suite to version 2605 or later, and change all default passwords and credentials.
Other vulnerabilities in Dell Wyse Management Suite (WMS) wersje przed 2605
See all- CVE-2026-44274High
A vulnerability in Dell Wyse Management Suite (WMS) prior to version 2605 is due to improper link resolution before file access. It allows a low-privileged attacker with local access to gain unauthorized access.
- CVE-2026-44272High
An SQL Injection vulnerability in Dell Wyse Management Suite (WMS) prior to version 2605 allows a low-privileged attacker to remotely execute unauthorized database queries. The flaw is due to improper neutralization of special elements used in SQL commands.
Original NVD description (English source)
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default Credentials vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.